mongo/etc/evergreen_yml_components/variants/misc/misc.yml

# Miscellaneous build variants
#
# After the branching variants in this file
# should continue to run on a new rapid release (v7.1, v7.2 etc.)
# and LTS release (v7.0, v6.0 etc.) branch projects

buildvariants:
  - name: run-all-affected-jstests
    display_name: "! Run All Affected JStests"
    tags: ["required"]
    patch_only: true
    run_on:
      - rhel8.8-medium
    expansions:
      large_distro_name: rhel8.8-large
      core_analyzer_distro_name: rhel8.8-xlarge
      burn_in_tag_include_all_required_and_suggested: true
      burn_in_tag_exclude_build_variants: >-
        macos-debug-suggested
        ubuntu2204-arm64-bazel-compile
      burn_in_tag_include_build_variants: >-
        enterprise-rhel-8-64-bit-inmem
        enterprise-rhel-8-64-bit-multiversion
        amazon-linux2023-arm64-try-sbe-engine
        amazon_linux2023_arm64_static-classic-engine-query-patch-only
      burn_in_tag_compile_task_dependency: archive_dist_test
      compile_variant: &amazon_linux2023_arm64_static_compile_variant_name amazon-linux2023-arm64-static-compile
    depends_on:
      - name: archive_dist_test
        variant: *amazon_linux2023_arm64_static_compile_variant_name
      - name: version_gen
        variant: generate-tasks-for-version
        # This is added because of EVG-18211.
        # Without this we are adding extra dependencies on evergreen and it is causing strain
        omit_generated_tasks: true
      - name: version_burn_in_gen
        variant: generate-tasks-for-version
        # This is added because of EVG-18211.
        # Without this we are adding extra dependencies on evergreen and it is causing strain
        omit_generated_tasks: true
    tasks:
      - name: burn_in_tags_gen

  - name: test-release
    display_name: "Test Release"
    # tasks may use "Admin Only" variables, so patch runs may only succeed for admins
    allowed_requesters: ["commit", "patch"]
    tags: ["assigned_to_jira_team_devprod_release_infrastructure"]
    activate: true
    run_on: ubuntu2404-small
    modules:
      - devprod_coverity
    tasks:
      - name: publish-sast-report

  - name: test-release-sbom
    activate: false
    display_name: "Test Release SBOM Upload"
    # The build variant is aimed for publish-augmented-sbom task testing.
    # For end-to-end tests:
    ## - Create new test branch from 10gen/mongo
    ## - Change SilkBomb branch argument to the new test branch in the task.
    ## - Cleanup results in DependencyTracker.
    # Note: The task may use "Admin Only" variables, so patch runs may only succeed for Evergreen Project admins
    allowed_requesters: ["patch"]
    tags: ["assigned_to_jira_team_platsec_ssdlc"]
    run_on: ubuntu2404-small
    modules:
      - devprod_coverity
    tasks:
      - name: publish-augmented-sbom

  - name: promote-custom-build
    display_name: "Promote Custom Build"
    activate: false
    allowed_requesters: ["patch"]
    tasks:
      - name: promote_custom_build

  - name: promote-sys-perf-build
    display_name: "Promote Sys-perf Build"
    activate: false
    allowed_requesters: ["patch"]
    tasks:
      - name: promote_sys_perf_build

  - name: copybara-sync-between-repos
    display_name: "* Copybara Sync Between Repos"
    tags: ["suggested"]
    activate: true
    run_on:
      - ubuntu2204-small
    stepback: false
    tasks:
      - name: sync_repo_with_copybara
        priority: 50

  - name: devcontainer-ubuntu
    display_name: "Devcontainer Test (ubuntu2204)"
    tags:
      ["assigned_to_jira_team_devprod_correctness", "auxiliary", "devcontainer"]
    activate: true
    paths:
      - ".devcontainer/**"
      - "evergreen/devcontainer*.sh"
      - "poetry_requirements.txt"
    run_on:
      - ubuntu2204-large
    tasks:
      - name: devcontainer_test

  - name: create_sbom_and_pr
    display_name: "Generate SBOM files and create PR"
    tags: ["assigned_to_jira_team_platsec_ssdlc"]
    # Don't run as part of patch builds
    patchable: false
    # Run at 6 am UTC Mon-Fri
    cron: "0 6 * * 1-5"
    run_on: rhel92-small
    expansions:
      ENDOR_NAMESPACE: mongodb.10gen
      BRANCH_FILTER: master|v[0-9]+\.[0-9]+-staging
    stepback: false
    tasks:
      - name: update_sbom

  - name: upload-sbom-if-changed
    display_name: "Upload SBOM if changed"
    allowed_requesters: ["commit"]
    expansions:
      BRANCH_FILTER: master|v[0-9]+\.[0-9]+-staging
      SBOM_REPO_PATH: &sbom_file sbom.private.json
    paths:
      - *sbom_file
    tags: ["assigned_to_jira_team_platsec_ssdlc"]
    run_on:
      - rhel8.8-small
    stepback: false
    tasks:
      - name: upload_sbom_via_silkbomb_if_changed